NetSight
IP …
high8.8

CVE-2026-106421

Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

Impact

Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected products

VendorProductAffected versions
GoogleChrome
before 155.0.8059.39

Weakness classification

CWE-416

References